$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145700.roa File: AS145700.roa (raw, json) Hash identifier: iCujiJZ0aNwFPZyvq8IpiJx/g5vn+vzxnT+oGvq5Sf4= Subject key identifier: 43:E3:08:C4:6F:ED:8F:67:D3:DF:A7:76:30:EC:56:DE:12:AD:75:EE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 46C293734D79710DF631CA02FE47DB05EDA644CE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145700.roa Signing time: Wed 04 Mar 2026 06:30:46 +0000 ROA not before: Wed 04 Mar 2026 06:25:46 +0000 ROA not after: Wed 03 Mar 2027 06:30:46 +0000 asID: 145700 IP address blocks: 240a:abea::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c2:93:73:4d:79:71:0d:f6:31:ca:02:fe:47:db:05:ed:a6:44:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:46 2026 GMT Not After : Mar 3 06:30:46 2027 GMT Subject: CN=43E308C46FED8F67D3DFA77630EC56DE12AD75EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:18:3e:f2:4e:dd:3c:99:ab:37:11:5a:fd: 63:31:bc:34:7a:bc:b0:07:0f:53:3b:d0:c4:52:3e: b6:29:cd:ed:ba:0f:c4:63:d2:dc:52:a5:5b:02:b1: 92:36:cc:72:77:78:7a:77:7b:e7:36:f0:c2:89:31: b5:f0:1c:a2:d7:3a:33:62:ea:81:10:f9:56:35:62: 3f:3d:0b:e4:7b:c4:54:4b:89:e1:47:86:25:aa:00: ed:3b:ea:2f:d6:4a:26:c9:2d:9c:81:88:63:f9:db: b0:b0:cf:bb:4f:11:9e:16:b5:d2:23:10:74:99:cb: cb:5d:53:a5:5b:7a:3e:05:6e:f4:d3:0c:b6:f4:14: 48:f8:9a:11:03:78:12:08:de:ce:0f:d7:9a:d4:04: eb:7c:68:06:f8:93:a8:fb:39:50:f2:f4:f9:e0:7e: 16:48:30:ad:9f:1b:28:35:3a:b7:c9:bd:69:34:8c: 79:31:76:c1:b7:79:29:28:83:c6:d8:06:65:ee:c2: d7:01:84:25:b3:3f:26:f9:34:43:d0:d7:0d:a2:72: 36:bf:6d:75:86:a6:e3:2f:db:ea:08:2f:2b:9c:d9: 74:80:06:9a:f2:b4:73:d8:a9:c8:7a:87:28:94:44: 6b:8f:78:32:44:9a:94:a6:6f:d8:65:81:84:03:16: a3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:08:C4:6F:ED:8F:67:D3:DF:A7:76:30:EC:56:DE:12:AD:75:EE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145700.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abea::/32 Signature Algorithm: sha256WithRSAEncryption 7a:62:f3:cb:15:27:0f:76:7a:30:3c:54:d4:bd:be:d0:b6:d5: 84:6a:4b:5a:83:90:d8:e2:3b:a2:a2:31:dc:e9:8b:d7:e2:a0: 58:25:3d:7f:17:c7:d8:8b:52:ca:10:5e:39:94:35:7c:4d:b4: d4:b6:d4:f0:57:9c:c5:f5:86:1f:54:b5:1d:0f:68:86:32:c3: 88:93:0d:b2:d8:40:79:a3:11:19:0c:cb:6e:99:7d:14:2c:32: 20:e1:ef:f3:bf:7a:fd:c7:47:77:64:bb:fa:38:6e:53:6d:41: aa:83:ce:e1:37:0a:38:3c:9d:f2:1d:e2:fc:9e:5b:32:9c:97: e2:c8:32:41:61:58:61:30:8f:98:2a:0a:d8:11:25:69:b7:fe: 63:da:1b:ad:6a:7f:91:5c:b2:a9:10:26:d8:25:70:d6:04:bc: ec:12:3a:e1:c5:d5:07:54:60:b5:c9:06:ea:13:fe:1f:f8:4e: ac:b7:73:b0:47:89:08:71:b5:ab:16:24:a0:0a:1a:01:b2:3f: 83:b8:18:11:de:a3:07:8f:93:8d:dd:d7:e9:f1:77:1e:98:ba: bf:e8:bd:e0:0c:ea:82:16:49:c2:d6:42:c3:f0:8a:98:bc:43: 1b:57:98:b7:e8:d2:dd:48:3f:a9:ea:cb:c6:93:d5:d8:c1:d4: 79:3c:7a:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURsKTc015cQ32McoC/kfbBe2mRM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0NloX DTI3MDMwMzA2MzA0NlowMzExMC8GA1UEAxMoNDNFMzA4QzQ2RkVEOEY2N0QzREZB Nzc2MzBFQzU2REUxMkFENzVFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMT5GD7yTt08mas3EVr9YzG8NHq8sAcPUzvQxFI+tinN7boPxGPS3FKlWwKx kjbMcnd4end75zbwwokxtfAcotc6M2LqgRD5VjViPz0L5HvEVEuJ4UeGJaoA7Tvq L9ZKJsktnIGIY/nbsLDPu08Rnha10iMQdJnLy11TpVt6PgVu9NMMtvQUSPiaEQN4 Egjezg/XmtQE63xoBviTqPs5UPL0+eB+FkgwrZ8bKDU6t8m9aTSMeTF2wbd5KSiD xtgGZe7C1wGEJbM/Jvk0Q9DXDaJyNr9tdYam4y/b6ggvK5zZdIAGmvK0c9ipyHqH KJREa494MkSalKZv2GWBhAMWo8UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRD4wjE b+2PZ9Pfp3Yw7FbeEq117jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+owDQYJKoZIhvcNAQELBQADggEBAHpi88sVJw92ejA8VNS9vtC21YRqS1qDkNji O6KiMdzpi9fioFglPX8Xx9iLUsoQXjmUNXxNtNS21PBXnMX1hh9UtR0PaIYyw4iT DbLYQHmjERkMy26ZfRQsMiDh7/O/ev3HR3dku/o4blNtQaqDzuE3Cjg8nfId4vye WzKcl+LIMkFhWGEwj5gqCtgRJWm3/mPaG61qf5FcsqkQJtglcNYEvOwSOuHF1QdU YLXJBuoT/h/4Tqy3c7BHiQhxtasWJKAKGgGyP4O4GBHeowePk43d1+nxdx6Yur/o veAM6oIWScLWQsPwipi8QxtXmLfo0t1IP6nqy8aT1djB1Hk8ei8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:33 2026 by rpki-client